@pugi/cli 0.1.0-beta.87 → 0.1.0-beta.88

package/CHANGELOG.md

@@ -7,6 +7,42 @@ releases listed first. Section format: `## [<version>] - <YYYY-MM-DD>`.
 The bundled `pugi release-notes` command parses this file and renders sections
 strictly newer than `~/.pugi/.last-seen-version` after every upgrade.
 
+## [0.1.0-beta.88] - 2026-06-02
+
+### Fixed
+- **Pugi identity intro no longer chants on later turns**. The output gate now
+  strips the canonical long-form intro ("I'm Pugi - your engineering copilot.
+  Tell me what you need...") and its Russian variant on mid-thread replies.
+  Operators were seeing the intro re-emit on turn 2+ after a session-resume
+  or autonomous tick.
+- **Ctrl+C double-press exit guard**. A single Ctrl+C in the REPL no longer
+  kills the CLI. First press prompts "Press Ctrl+C again to exit (within 2s)
+  or any key to continue". Second press within 2s exits cleanly; any other
+  key cancels. Headless mode emits a `session-end` envelope and exits 0.
+- **Persona no longer over-clarifies trivial creative tasks**. Asking for a
+  well-known game / demo / todo app now picks reasonable defaults and starts
+  building in one turn. Ambiguous tasks (auth, deploy targets) still ask
+  ≤ 3 short choices via the `ask_user_question` tool.
+
+### Added
+- **Short-format AskUserQuestion chip renderer**. Up to 3 questions render
+  side-by-side as Ink chips with ▸ default highlight, ↑↓ in-question nav,
+  ←→/Tab between questions, 1-9 jump, [s] skip-with-default, [Esc] cancel,
+  [Enter] commit. Labels truncate at 5 words / 22 chars. Caller can opt
+  into a non-TTY numbered fallback via `forceFallback`.
+
+### Security
+- **npm publish leak-gate hardening**. `prepublishOnly` now runs a
+  banned-string scan against the staged tarball (`tools/scrub/scan-tarball.sh`)
+  covering personal names, competitor refs, internal codenames, engineering
+  provenance, absolute paths, brand legacy, and secret-token shapes.
+  Per-line `[pugi-leak-ok]` allowlist marker for legitimate references;
+  path allowlist for LICENSE / THIRD_PARTY_NOTICES files where MIT requires
+  copyright-holder name. Synthetic injection regression test runs in CI.
+
+### Chore
+- MIT LICENSE copyright holder set to `Pugi.io` (was personal name).
+
 ## [0.1.0-beta.26] - 2026-05-27
 
 ### Added

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Yurii Bulakh
+Copyright (c) 2026 Pugi.io
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/core/agents/registry.js

@@ -30,7 +30,7 @@ function requirePersona(slug) {
 /**
  * CLI-only role-to-persona mapping. Roles are dispatcher-facing strings;
  * personas come from the brand-canonical THE_TEN. Vera (qa) intentionally
- * dual-roles as verifier + reviewer per ADR-0056 — the cabinet's review
+ * dual-roles as verifier + reviewer per  — the cabinet's review
  * pipeline already merges the two surfaces.
  */
 export const SUBAGENT_REGISTRY = [

package/dist/core/checkpoints/shadow-git.js

@@ -2,7 +2,7 @@
  * Per-task shadow git repo — file-state checkpoint surface.
  *
  * Inspired by Cline `CheckpointTracker.ts` (Apache-2.0).
- * Clean-room TypeScript implementation following Pugi conventions.
+ * independent implementation TypeScript implementation following Pugi conventions.
  *
  * Goal: every Pugi-orchestrated file mutation lands in a per-task
  * shadow git history kept entirely separate from the user's real

package/dist/core/context/compaction.js

@@ -2,7 +2,7 @@
  * Six-tier context compaction engine for the Pugi CLI agent loop.
  *
  * Spec: `docs/research/pugi-cli-corpus/patterns/context-compaction.md`,
- * sprint slot: ADR-0056 §.
+ * sprint slot:  §.
  *
  * Tiers and triggers (selectTier rules):
  *

package/dist/core/denial-tracking/state.js

@@ -1,7 +1,7 @@
 /**
  * L11 — DenialTrackingState surface (the upstream tool parity).
  *
- * Per the upstream / anarchic-CC the upstream behavior (``
+ * Per the upstream /  the upstream behavior (``
  * §5.2): the upstream tool's `QueryEngine.ts` maintains a per-session
  * `DenialTrackingState` that records every tool-dispatch denial.
  * Subsequent turns receive a compact reminder so the model does not

package/dist/core/edits/fuzzy-ladder.js

@@ -30,7 +30,7 @@
  *     >= 0.8 to count as a match; below that we fail LOUD rather
  *     than write the wrong region.
  *
- * Inspired by Aider editblock_coder.py (Apache-2.0). Clean-room
+ * Inspired by Aider editblock_coder.py (Apache-2.0). independent implementation
  * implementation; no Aider source code copied.
  *
  * Pure functions throughout — every tier returns a structured result

package/dist/core/edits/layer-a-fuzzy-apply.js

@@ -19,7 +19,7 @@
  *  - `identical_replacement` — search and replace are identical;
  *                         would no-op; surfaced LOUD.
  *
- * Inspired by Aider editblock_coder.py (Apache-2.0). Clean-room
+ * Inspired by Aider editblock_coder.py (Apache-2.0). independent implementation
  * implementation; no Aider source code copied.
  */
 import { existsSync, readFileSync, renameSync, writeFileSync, unlinkSync } from 'node:fs';

package/dist/core/engine/anvil-client.js

@@ -64,11 +64,22 @@ export class AnvilEngineLoopClient {
             // PR-CLI-SERVER-VERSION-HANDSHAKE . Stamp the outbound
             // X-Pugi-Cli-Version header so the admin-api middleware can
             // decide whether to honour, soft-warn, or 426 this request.
-            const outboundHeaders = injectClientVersionHeader({
+            // PUGI-260: also stamp `X-Pugi-Context-Tier: 1m` when the
+            // operator opted into the long-context lane. The server reads
+            // either the body's `contextTier` field OR this header (header is
+            // a fallback for older runtimes / non-CLI clients), so emitting
+            // both is harmless и belt-and-suspenders. Only emitted for the
+            // `'1m'` value — the absence of the header is wire-equivalent к
+            // `'standard'`, keeping the default-lane path header-free.
+            const baseHeaders = {
                 'content-type': 'application/json',
                 authorization: `Bearer ${this.config.apiKey}`,
                 'user-agent': 'pugi-cli/0.0.1',
-            }, PUGI_CLI_VERSION);
+            };
+            if (options.contextTier === '1m') {
+                baseHeaders['x-pugi-context-tier'] = '1m';
+            }
+            const outboundHeaders = injectClientVersionHeader(baseHeaders, PUGI_CLI_VERSION);
             const res = await fetch(url, {
                 method: 'POST',
                 headers: outboundHeaders,

package/dist/core/mcp/server-tools.js

@@ -6,7 +6,7 @@ import { bashToolSync } from '../../tools/bash.js';
  * The shapes intentionally mirror the engine-loop tool schemas in
  * `core/engine/tool-bridge.ts` so an MCP client and the Pugi engine see
  * the same parameter contracts. This is the "Pugi as MCP server"
- * surface — other agents (the upstream tool, Codex, OpenCode) call these to
+ * surface — other agents (the upstream tool, Codex, peer tooling) call these to
  * read / mutate the workspace through us, with all our security gates
  * (path containment, plan-mode refusal, bash classifier, settings) in
  * the loop.

package/dist/core/mcp/server.js

@@ -1,7 +1,7 @@
 import { EventEmitter } from 'node:events';
 /**
  * Pugi MCP server (β4 M2) — exposes Pugi's native tool surface to other
- * agents (the upstream tool, OpenCode, Codex CLI, any client that speaks
+ * agents (the upstream tool, peer tooling, Codex CLI, any client that speaks
  * MCP).
  *
  * Transport-agnostic core. The stdio entry-point lives at the bottom of

package/dist/core/memory/secret-scanner.js

@@ -1,10 +1,10 @@
 /**
- * Persona-memory secret scanner (backlog, ADR-0063 hardening).
+ * Persona-memory secret scanner (backlog,  hardening).
  *
  * Defense against API keys / credentials accidentally landing in shared
  * persona memory. A naive operator typing `pugi memory write fact "Use
  * API key sk-ant-..."` would silently persist that secret to the
- * `cf_admin.persona_memory` table — visible to every persona, every
+ * `the platform database.persona_memory` table — visible to every persona, every
  * recall query, every dual-write sink. This module is the chokepoint
  * that refuses such writes.
  *
@@ -25,7 +25,7 @@
  *  3. GitHub PAT / installation tokens (ghp_/ghs_/gho_/ghu_)
  *                                                      high
  *  4. AWS access key id       AKIA…                high
- *  5. Plane API token         plane_api_…          high
+ *  5. Plane API token         plane_api_…          high   [pugi-leak-ok]
  *  6. npm token               npm_…                high
  *  7. Slack token             xox[bpoars]-…        high
  *  8. Stripe secret key       sk_(live|test)_…     high
@@ -59,10 +59,10 @@
  *    instead of reject. The scanner exposes `redactSecrets` for that
  *    caller — see `runtime/commands/memory.ts`.
  *
- * # Clean-room provenance
+ * # independent implementation provenance
  *
  * Inspired by the the upstream tool teamMemorySync.secretScanner pattern
- * (intel from leak-research memos). Clean-room TypeScript
+ * (intel from leak-research memos). independent implementation TypeScript
  * implementation — no upstream code reused. Pattern vocabulary was
  * cross-referenced against the existing
  * `apps/pugi-cli/scripts/secret-scanner.mjs` tarball gate so a single
@@ -124,7 +124,7 @@ const SECRET_RULES = [
         pattern: 'plane-api-token',
         // Plane (project management) personal API tokens. Bounded to 20+
         // url-safe chars after the prefix.
-        regex: /\bplane_api_[A-Za-z0-9]{20,}(?![A-Za-z0-9])/g,
+        regex: /\bplane_api_[A-Za-z0-9]{20,}(?![A-Za-z0-9])/g, // [pugi-leak-ok]
         confidence: 'high',
     },
     {

package/dist/core/onboarding/ensure-initialized.js

@@ -119,7 +119,7 @@ export async function ensureInitialized(opts) {
     write(`No Pugi workspace found at ${root}.\n`);
     const answer = (await opts.prompt('Initialize a new Pugi workspace here? (Y/n) ')).trim().toLowerCase();
     // Default = yes (empty input OR leading 'y'). Anything else = no.
-    // Mirrors the gh CLI / claude code prompt convention where the upper-
+    // Mirrors the gh CLI / the upstream prompt convention where the upper-
     // case option in `(Y/n)` is the default-on-Enter answer.
     const acceptedShort = answer === '' || answer === 'y' || answer === 'yes';
     if (!acceptedShort) {

package/dist/core/plans/plan-artifact.js

@@ -2,7 +2,7 @@
  * Plan-as-FILE artifact store (Pugi backlog).
  *
  * Pattern absorbed from the the upstream tool `ExitPlanMode` leak intel
- * (clean-room TypeScript reimplementation — no source was copied; only
+ * (independent implementation TypeScript reimplementation — no source was copied; only
  * the file-as-artifact concept). When Pugi enters plan-mode the engine
  * routes the plan body to `.pugi/plans/<plan-id>.md` instead of the
  * message stream so it survives `/compact`, becomes diffable across
@@ -205,7 +205,7 @@ function yamlScalar(value) {
     // Empty string is also disambiguated by quoting.
     if (value.length === 0)
         return '""';
-    if (/[-"]/.test(value)) {
+    if (/[-"]/.test(value)) {
         return JSON.stringify(value);
     }
     if (/[:#\n\t]/.test(value)) {

package/dist/core/repl/cap-warning.js

@@ -1,5 +1,5 @@
 /**
- * Client-side concurrent-subagent cap - Sprint (ADR-0056
+ * Client-side concurrent-subagent cap - Sprint (
  * acceptance #6, Mac safety memo
  * `feedback_max_3_parallel_agents_mac_safety.md`).
  *

package/dist/core/routing/pre-flight-estimator.js

@@ -1,5 +1,5 @@
 /**
- * Pre-flight token estimator — Nuekkis tokenEstimation port,
+ * Pre-flight token estimator — external tokenEstimation port,
  * adapted for Anvil's 3-tier routing.
  *
  * The auto-compact gate counts tokens AFTER a turn lands. This module

package/dist/core/settings.js

@@ -165,6 +165,18 @@ const pugiSettingsSchema = z.object({
     // keeps Zod's strip-pass from swallowing it before the chain reader
     // sees it. See `hook-chains.ts` for the full schema.
     hooks: z.any().optional(),
+    // PUGI-260 — persistent default for the 1M context tier opt-in.
+    // `pugi config set context.tier 1m` writes this; per-invocation
+    // `--context-tier=...` flags override it. When omitted, the CLI
+    // sends no `contextTier` field на the wire (server treats as
+    // `standard` routing). The closed enum mirrors the CLI flag и the
+    // admin-api DTO; an unrecognised value triggers a Zod parse error
+    // at load time rather than a silent fallback.
+    context: z
+        .object({
+        tier: z.enum(['1m', 'standard']).optional(),
+    })
+        .optional(),
 });
 /**
  * #20 — the upstream tool drop-in compat ingest.

package/dist/index.js

@@ -1,6 +1,14 @@
 #!/usr/bin/env node
 import { runCli } from './runtime/cli.js';
 import { PugiCliUpgradeRequiredError } from './core/transport/version-interceptor.js';
+import { installSigintGuard } from './runtime/sigint-guard.js';
+// PUGI-469 — install the top-level double-press Ctrl+C exit guard
+// BEFORE any other init. Operators reported single ^C exiting the
+// CLI; the guard requires a second press inside a 2s window (or
+// emits a clean session-end envelope on the headless path) so a
+// stray keystroke never kills the session. See the module header
+// in `runtime/sigint-guard.ts` for the full behavior spec.
+installSigintGuard();
 runCli(process.argv.slice(2)).catch((error) => {
     // PR-CLI-SERVER-VERSION-HANDSHAKE . When the admin-api returns
     // 426 Upgrade Required, the engine transport throws a typed

package/dist/runtime/cli.js

@@ -49,7 +49,7 @@ import { runUndoCommand } from './commands/undo.js';
 import { runCompactCommand } from './commands/compact.js';
 import { runRewindCommand } from './commands/rewind.js';
 import { runSessionsCommand } from './commands/sessions.js';
-// Day 4 ADR-0063: persona-memory operator surface (list / recall / write /
+// Day 4 : persona-memory operator surface (list / recall / write /
 // forget / sync). The runner is shared by `pugi memory` top-level and the
 // in-REPL `/memory` slash so the two surfaces stay single-sourced.
 import { runMemoryCommand } from './commands/memory.js';
@@ -64,7 +64,7 @@ import { runRecipeCommand } from './commands/recipe.js';
 import { installDefaultSkills } from '../core/skills/defaults.js';
 // Backlog : bundled-skills batch 1 (stuck / simplify /
 // remember). Backlog : batch 2 (batch / verify / loop /
-// skillify, Nuekkis clean-room).
+// skillify, external independent implementation).
 // Imported through the dedicated registry so future batches only append
 // to one barrel.
 import { runRememberCommand, runSimplifyCommand, runStuckCommand, runBatchCommand, runVerifyCommand, runLoopCommand, runSkillifyCommand, } from '../skills/bundled/index.js';
@@ -151,7 +151,7 @@ const handlers = {
     logout,
     lsp: dispatchLsp,
     mcp: dispatchMcp,
-    // ADR-0063 Day 4: `pugi memory list|recall|write|forget|sync`. Routes
+    //  Day 4: `pugi memory list|recall|write|forget|sync`. Routes
     // to `runMemoryCommand` (admin-api `/api/persona-memory` + offline
     // queue at `~/.pugi/memory-queue.jsonl`).
     memory: dispatchMemory,
@@ -233,7 +233,7 @@ const handlers = {
     // when no approval gate is wired. The existing `pugi memory write`
     // surface keeps its silent-enqueue behaviour for back-compat.
     remember: dispatchRemember,
-    // Backlog — bundled-skills batch 2 (Nuekkis clean-room).
+    // Backlog — bundled-skills batch 2 (external independent implementation).
     // `pugi batch` fans out a YAML recipe of independent engine tasks
     // through up to --concurrency=N subprocesses (hard cap 30 per the
     // Mac safety carve-out). Aggregates results into
@@ -447,7 +447,7 @@ async function dispatchPrivacy(args, flags, _session) {
     });
 }
 /**
- * ADR-0063 Day 4 — `pugi memory <sub>` top-level dispatcher.
+ *  Day 4 — `pugi memory <sub>` top-level dispatcher.
  *
  * Forwards to the shared `runMemoryCommand` runner. Exit codes:
  *
@@ -1597,7 +1597,7 @@ export async function runCli(argv) {
     // stderr line above the alt-screen flicker would race against the
     // banner paint on slow terminals.
     // Bare `pugi` on a TTY enters the REPL-by-default agentic session
-    // (Sprint , ADR-0056). The REPL is the customer-facing surface
+    // (Sprint , ). The REPL is the customer-facing surface
     // that brings Pugi to parity with the upstream tool / Codex CLI. When the
     // operator has no credentials yet, we fall back to the splash
     // so the install-time `pugi` surface still shows the wordmark +
@@ -1824,7 +1824,7 @@ function parseArgs(argv) {
         }
         else if (arg === '--council') {
             // Backlog — opt-in council mode (Karpathy llm-council
-            // pattern, MIT clean-room TS port). Pairs with `--triple
+            // pattern, MIT independent implementation TS port). Pairs with `--triple
             // --commit <SHA>`; the dispatch wraps the multi-provider
             // fan-out with an anonymous peer-review stage + chairman
             // synthesis. Costs ~2× tokens; explicit opt-in only.
@@ -4101,7 +4101,7 @@ async function performTripleProviderReview(root, session, flags, prompt) {
         // Server-side the controller also accepts `?council=true` query
         // string + `mode: 'council'` body shorthand; the CLI sends the
         // explicit boolean for forward compatibility. Inspired by
-        // Karpathy llm-council pattern (MIT). Clean-room TS port.
+        // Karpathy llm-council pattern (MIT). independent implementation TS port.
         ...(flags.council ? { council: true } : {}),
     });
     writeFileSync(requestPath, `${JSON.stringify(requestBody, null, 2)}\n`, {
@@ -4961,6 +4961,38 @@ export function setHeadlessWriters(writers) {
     headlessStdoutWriter = writers.stdout ?? null;
     headlessStderrWriter = writers.stderr ?? null;
 }
+/**
+ * PUGI-260 — read the persisted `contextTier` default из
+ * `~/.pugi/config.json` (written by `pugi config set context.tier 1m`).
+ * Returns `undefined` when the config file is missing, the key is
+ * unset, or the value is invalid. Failures are silent — a malformed
+ * persisted config must NEVER break the per-invocation dispatch path;
+ * the flag default just falls back к "no preference" and the request
+ * goes out on the standard lane.
+ *
+ * Kept inline (rather than importing from `commands/config.ts`) so the
+ * dispatch path does not pull в the full `pugi config` command tree
+ * during a `pugi code "..."` cold start — the import graph stays narrow.
+ */
+function readPersistedContextTier() {
+    try {
+        const home = process.env.PUGI_HOME ?? resolve(homedir(), '.pugi');
+        const path = resolve(home, 'config.json');
+        if (!existsSync(path))
+            return undefined;
+        const raw = readFileSync(path, 'utf8');
+        if (raw.trim() === '')
+            return undefined;
+        const parsed = JSON.parse(raw);
+        if (parsed.contextTier === '1m' || parsed.contextTier === 'standard') {
+            return parsed.contextTier;
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function runEngineTask(kind) {
     return async (args, flags, session) => {
         const label = commandLabel(kind);
@@ -5250,18 +5282,29 @@ function runEngineTask(kind) {
             // point); `allowParallelAgents=false` strips the `agent` tool from
             // the schema so quick / standard tiers cannot accidentally fan out.
             intensityProfile,
-            // Task — 1M context tier opt-in. The operator passes
+            // PUGI-260 — 1M context tier opt-in. The operator passes
             // `--context-tier=1m` to request the long-context lane. Server
-            // enforces Team-tier ($199) entitlement and rewrites the model к
-            // the `pugi-1m` alias. Lower tiers receive HTTP 402 with an
-            // upgrade-path message rendered by the dispatch error handler.
-            // `flags.contextTier` is intentionally NOT defaulted к 'standard'
-            // here — `undefined` and `'standard'` are wire-equivalent (admin-
-            // api treats both as no-op), so the wire stays clean for callers
-            // that omit the flag entirely.
-            ...(flags.contextTier !== undefined
-                ? { contextTier: flags.contextTier }
-                : {}),
+            // enforces Builder ($99) или Team ($199) entitlement и rewrites
+            // the model к the `pugi-1m` alias. Lower tiers receive HTTP 402
+            // with `reason: 'context_tier_requires_upgrade'` + the
+            // `X-Pugi-Quota-Exceeded: context_tier_requires_upgrade` response
+            // header rendered by the dispatch error handler.
+            //
+            // Resolution order:
+            //   1. `--context-tier=1m|standard` flag (per-invocation override).
+            //   2. `~/.pugi/config.json::contextTier` (persistent default,
+            //      set via `pugi config set context.tier 1m`).
+            //   3. Omitted on the wire — admin-api treats omitted == standard.
+            //
+            // `'standard'` is wire-equivalent to omitted (the gate short-
+            // circuits when `request.contextTier !== '1m'`), so the wire stays
+            // clean for callers that omit the flag entirely.
+            ...(() => {
+                const effectiveTier = flags.contextTier ?? readPersistedContextTier();
+                return effectiveTier !== undefined
+                    ? { contextTier: effectiveTier }
+                    : {};
+            })(),
         });
         const toolCallId = recordToolCall(session, `engine:${adapter.name}`, `${label}: ${prompt}`);
         const taskId = `${kind}-${Date.now()}`;
@@ -7810,7 +7853,12 @@ export const __test__ = {
     // Backlog — `parseArgs` exposed under the test namespace so the
     // council-flag spec can assert flag-to-CliFlags mapping without
     // standing up a full execFileSync harness. Inspired by Karpathy
-    // llm-council pattern (MIT). Clean-room TS port.
+    // llm-council pattern (MIT). independent implementation TS port.
     parseArgs,
+    // PUGI-260 — exposed под the test namespace so the persisted-
+    // contextTier-fallback spec can exercise the actual reader (с its
+    // env-driven $PUGI_HOME redirect) without going через the full
+    // engine-task dispatch path.
+    readPersistedContextTier,
 };
 //# sourceMappingURL=cli.js.map

package/dist/runtime/commands/config.js

@@ -39,9 +39,41 @@ const configSchema = z
     privacy: z.enum(['local-only', 'metadata', 'full']).optional(),
     model: z.string().nullable().optional(),
     preferredEndpoint: z.string().url().optional(),
+    // PUGI-260 — persistent default for the 1M context tier opt-in.
+    // `pugi config set contextTier 1m` (or the dotted form
+    // `context.tier 1m`) writes this; per-invocation `--context-tier=...`
+    // flags override it at request time. Closed enum mirrors the CLI
+    // flag и the admin-api DTO so a typo here surfaces as a Zod parse
+    // error при load, not a silent fallback. Stored on the flat user-
+    // level config (~/.pugi/config.json) so all workspaces inherit the
+    // same default — operators с consistent long-context workloads
+    // (large monorepos, audits) set it once instead of remembering к
+    // pass --context-tier=1m on every dispatch.
+    contextTier: z.enum(['1m', 'standard']).optional(),
 })
     .strict();
-const CONFIG_KEYS = ['permissionMode', 'privacy', 'model', 'preferredEndpoint'];
+const CONFIG_KEYS = [
+    'permissionMode',
+    'privacy',
+    'model',
+    'preferredEndpoint',
+    // PUGI-260 — exposed на `pugi config list` so operators see the
+    // current default. Hidden synonym `context.tier` accepted by
+    // runConfigSet / runConfigGet for a dotted-key familiar UX.
+    'contextTier',
+];
+/**
+ * PUGI-260: legacy / nested key aliasing. `pugi config set context.tier 1m`
+ * is the documented form в the feat doc; we normalise it onto the flat
+ * `contextTier` key before the strict-schema validation так future
+ * settings.json migrations keep one canonical key. Mirrors the
+ * legacy privacy-mode aliasing that already lives in the file.
+ */
+function normaliseConfigKey(raw) {
+    if (raw === 'context.tier')
+        return 'contextTier';
+    return raw;
+}
 export async function runConfigCommand(args, ctx) {
     const sub = args[0];
     if (!sub || sub === '--help' || sub === '-h') {
@@ -178,25 +210,27 @@ function isConfigKey(value) {
     return CONFIG_KEYS.includes(value);
 }
 function runConfigGet(args, ctx) {
-    const key = args[0];
-    if (!key)
+    const rawKey = args[0];
+    if (!rawKey)
         throw new Error('pugi config get requires a key.');
+    const key = normaliseConfigKey(rawKey);
     if (!isConfigKey(key)) {
-        throw new Error(`Unknown config key "${key}". Allowed: ${CONFIG_KEYS.join(', ')}.`);
+        throw new Error(`Unknown config key "${rawKey}". Allowed: ${CONFIG_KEYS.join(', ')}.`);
     }
     const config = readConfig();
     const value = config[key] ?? null;
     ctx.writeOutput({ command: 'config.get', key, value }, value === null || value === undefined ? `${key} = (unset)` : `${key} = ${String(value)}`);
 }
 function runConfigSet(args, ctx) {
-    const key = args[0];
+    const rawKey = args[0];
     const value = args.slice(1).join(' ');
-    if (!key)
+    if (!rawKey)
         throw new Error('pugi config set requires a key.');
     if (value.length === 0)
         throw new Error('pugi config set requires a value.');
+    const key = normaliseConfigKey(rawKey);
     if (!isConfigKey(key)) {
-        throw new Error(`Unknown config key "${key}". Allowed: ${CONFIG_KEYS.join(', ')}.`);
+        throw new Error(`Unknown config key "${rawKey}". Allowed: ${CONFIG_KEYS.join(', ')}.`);
     }
     const current = readConfig();
     // Build the candidate and validate via the schema so an invalid value